KLA10496 Denial of service vulnerability in Apache Xerces

An unspecified vulnerability was found in Apache Xerces-C. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via a specially designed XML data.

Original advisories

Apache bulletin

Exploitation

Public exploits exist for this vulnerability.

Related products

Xerces

CVE list

CVE-2015-0252 critical

Solution

Update to latest version!

Get Apache Xerces-C

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Apache Xerces-C versions earlier than 3.1.2